Policy processing model

Abstract

Example embodiments provide for processing policies that include policy assertions associated with incoming or outgoing messages of an application in a distributed system, without having to have code within the application for executing the policy assertions. When a message is received by a Web service engine, a policy document associated with an application may be accessed for identifying objects corresponding to policy assertions within the policy document. The objects identified can then be used to generate assertion handlers, which are software entities that include executable code configured to determine if messages can satisfy requirements described by the policy assertions.

Description

CROSS-REFERENCE TO RELATED APPLICATIONS [0001] N / A BACKGROUND OF THE INVENTION [0002] 1. The Field of the Invention [0003] The present invention generally relates to Web service policies in a distributed system. More particularly, the present invention provides for a policy processing model for determining if messages associated with an application satisfy web service policy assertions. [0004] 2. Background and Related Art [0005] Computerized systems provide many advantages towards people's ability to perform tasks. To enable these advantages, computer systems often come equipped with (or are expandable to include) multiple hardware devices that can store or read data or enable a software program to perform a specific action on data. Such devices can include, e.g., a hard drive, a Compact Disk (i.e., CDROM, CDRW, ect.), a Universal Serial Bus (USB) devise (e.g., a printer, a scanner, etc.), and so on. Present computer systems also commonly have installed there on multiple software (...

AI Technical Summary

Benefits of technology

The present invention provides a solution for processing policies in a Web services environment without requiring code within the application. It receives a message at a Web service engine associated with an application and accesses a policy document for identifying objects corresponding to policy assertions. These objects are then combined using logical operators to form a policy expression. A policy model is generated using assertion handlers that determine if the received message can satisfy the requirements of the policy expression. This invention allows for more efficient and flexible policy processing in Web services environments.

Problems solved by technology

If you don't connect it to anything else, it is not as valuable as it could be.

The inventory system may be unable to automatically place orders to suppliers.

Accordingly, the benefits of such inventory system are diminished by high over head costs.

Until recently, however, custom integration was thought to be expensive, time-consuming and brittle.

For example, because the sales data base and the accounting system are typically not designed to work with each other (i.e., because the data for each application is formatted and accessed according to the way the application program was formatted), connecting the two can be expensive and time-consuming.

Further, even if the systems were able to be integrated, making changes to either or possibly adding other systems could break the link, thereby causing more time and more money.

Because, however, Web services provide various services from different businesses, organizations, and other service providers via the Internet, security issues are a main concern to protect the information that is transferred.

By themselves, Web service securities do not ensure security nor do they provide a complete security solution.

For example, once compiled the defined policies become unchangeable within that particular application, and a new version of the application must be created if changes are desired.

Further, if the specified policy and / or security features specified in the application are no longer supported, the application cannot be extended to support alternative updates—unless, of course, an updated version of the application is created.

As such, there is neither flexibility nor ease in extending the system.

Further, because such application developers are typically not experts in such policy issues, there are security concerns that come into play, as well as performance, stress and / or other robustness factors.

Images